$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json) Hash identifier: iYH3BTy7aglo18xyKYtsGsICSs2k3AdHCuOiBntnL+Q= Subject key identifier: A4:18:91:FA:40:8A:0F:32:24:49:B4:13:A4:E7:5F:D8:D3:6A:AE:7D Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Certificate serial: 4F5D75BD6AC5163F542C01AF838074FCBBCA99BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft Manifest number: 0397 Signing time: Thu 21 Aug 2025 03:41:10 +0000 Manifest this update: Thu 21 Aug 2025 03:36:10 +0000 Manifest next update: Sun 24 Aug 2025 14:00:10 +0000 Files and hashes: 1: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: D2sg2lwZpIcyhIpPf0lQmZmbLDTE5RzMP9z3aL6VDvU=) 2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: GKVVkkXboxeT4WcoJCcUdHA/7DHycn3Kvf/vm4KqRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5d:75:bd:6a:c5:16:3f:54:2c:01:af:83:80:74:fc:bb:ca:99:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Validity Not Before: Aug 21 03:36:10 2025 GMT Not After : Aug 24 14:00:10 2025 GMT Subject: CN=A41891FA408A0F322449B413A4E75FD8D36AAE7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:91:64:3e:d0:f6:c5:00:25:ee:70:38:e8: 93:5c:d9:dd:8c:d9:06:ab:3e:cf:ed:49:f3:1b:7d: 80:a0:a6:f3:2a:7d:c7:bd:17:0d:eb:38:20:84:d8: 5e:9f:40:18:e5:4f:6c:1b:17:4c:2f:f9:1d:b0:db: 5d:b3:15:a6:d4:08:e2:43:52:d6:2e:92:59:5b:e9: 3c:59:26:ea:a6:00:37:f2:79:d6:73:3c:e8:d9:47: 1f:0f:5f:33:1e:31:4f:86:7e:73:eb:6d:22:05:6b: 1b:15:7e:f5:34:32:0a:c4:6b:cc:e4:3b:fa:45:c3: da:8f:ab:28:e1:ee:0d:57:30:84:a2:81:65:52:fb: bb:ff:ee:93:4c:82:9d:86:57:f9:b0:6b:c8:61:ba: b0:44:10:99:13:d7:1c:33:6b:25:d2:60:7b:45:42: f4:0d:ed:d6:5a:68:24:03:98:d0:5c:72:3c:c1:f8: b9:16:05:34:60:93:25:8f:c9:94:d7:53:93:81:80: 98:aa:5b:2d:24:f5:68:c1:3c:f3:6d:4e:90:04:b8: 00:fc:b9:ee:9c:da:96:60:b1:e9:7b:49:78:13:60: 34:91:2a:eb:b0:1b:06:19:91:40:18:7c:64:3b:77: 74:97:2a:01:20:e8:ce:45:c0:84:c4:cc:d8:a7:5b: 6c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:18:91:FA:40:8A:0F:32:24:49:B4:13:A4:E7:5F:D8:D3:6A:AE:7D X509v3 Authority Key Identifier: keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2a:41:7e:2a:60:50:73:8c:1c:f7:17:c0:8f:52:5c:e2:db: b2:b8:a9:98:ea:04:a0:48:d7:31:e1:92:46:2b:d5:7c:aa:a3: 53:7a:f6:cf:dc:7d:58:5f:0a:8e:5c:a6:05:15:75:47:2c:a3: 81:a0:39:da:cc:55:51:dd:eb:a3:fc:73:ec:31:ad:0a:03:80: a8:59:ba:7a:a8:51:0f:6f:f3:6c:1d:dd:55:b4:50:e1:d9:0d: fc:f3:1a:6a:c2:94:f3:2a:dc:2e:fb:72:29:51:52:74:36:98: a2:95:c4:54:50:99:c8:9e:73:b9:59:9a:59:2c:51:d1:9e:98: d6:51:86:0d:ef:a8:ac:93:f7:f1:8b:fb:b2:88:3e:f0:5e:61: 34:27:c7:46:e0:79:63:c5:3a:dc:fa:a1:e0:51:a1:24:e4:06: a2:8c:62:eb:7f:3c:bd:85:4c:91:1b:01:fb:ba:9d:77:d3:28: 93:d9:e5:6c:b2:06:04:9e:59:dd:39:82:fb:4a:74:97:9b:cc: 16:70:1c:7b:c9:1b:1c:49:27:8d:7d:37:e8:ae:6f:e7:d5:1d: d6:bd:1d:cf:d6:0b:d9:f0:9d:3a:63:11:da:83:04:ad:5b:6d: 5a:1f:5f:d3:8d:0e:fb:0d:7e:a8:1e:4a:78:44:d7:e3:a0:e7: 36:22:bd:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT111vWrFFj9ULAGvg4B0/LvKmb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC QzY0MzUyNTAeFw0yNTA4MjEwMzM2MTBaFw0yNTA4MjQxNDAwMTBaMDMxMTAvBgNV BAMTKEE0MTg5MUZBNDA4QTBGMzIyNDQ5QjQxM0E0RTc1RkQ4RDM2QUFFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MpFkPtD2xQAl7nA46JNc2d2M 2QarPs/tSfMbfYCgpvMqfce9Fw3rOCCE2F6fQBjlT2wbF0wv+R2w212zFabUCOJD UtYukllb6TxZJuqmADfyedZzPOjZRx8PXzMeMU+GfnPrbSIFaxsVfvU0MgrEa8zk O/pFw9qPqyjh7g1XMISigWVS+7v/7pNMgp2GV/mwa8hhurBEEJkT1xwzayXSYHtF QvQN7dZaaCQDmNBccjzB+LkWBTRgkyWPyZTXU5OBgJiqWy0k9WjBPPNtTpAEuAD8 ue6c2pZgsel7SXgTYDSRKuuwGwYZkUAYfGQ7d3SXKgEg6M5FwITEzNinW2xJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpBiR+kCKDzIkSbQTpOdf2NNqrn0wHwYDVR0j BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0 MzUyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJG MkNCQzY0MzUyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgqQX4qYFBzjBz3F8CPUlzi27K4qZjqBKBI 1zHhkkYr1Xyqo1N69s/cfVhfCo5cpgUVdUcso4GgOdrMVVHd66P8c+wxrQoDgKhZ unqoUQ9v82wd3VW0UOHZDfzzGmrClPMq3C77cilRUnQ2mKKVxFRQmciec7lZmlks UdGemNZRhg3vqKyT9/GL+7KIPvBeYTQnx0bgeWPFOtz6oeBRoSTkBqKMYut/PL2F TJEbAfu6nXfTKJPZ5WyyBgSeWd05gvtKdJebzBZwHHvJGxxJJ419N+iub+fVHda9 Hc/WC9nwnTpjEdqDBK1bbVofX9ONDvsNfqgeSnhE1+Og5zYivZU= -----END CERTIFICATE-----Generated at Sat Aug 23 11:59:45 2025 by rpki-client